DDoS protection
DDoS protection aims to mitigate distributed overload attacks. Covered services, network capacity and effects on normal traffic need checking.
What does DDoS protection mean?
In a distributed denial-of-service attack, multiple sources put load on a service or its infrastructure to disrupt normal use. Cloudflare explains attacks on bandwidth, protocol resources and web applications. Protective measures aim to detect attack traffic and limit its impact. The product documentation shows different areas of protection.
Example: protecting public portal access
A fictional team establishes with its operator which portal access routes actually pass through the intended solution. It also checks whether other publicly reachable services sit outside that protection path and how an incident will be handled.
A filter only at the team's own server is insufficient against an upstream link that is already saturated. Protection planning must therefore consider the route to the service.
Permitted requests should continue to work. Detection, limiting and false blocks need monitoring. DDoS protection is not a guarantee of uninterrupted operation and does not fix application business-logic errors.
Sources
Related terms
- Load balancerA load balancer distributes connections or requests across several destinations. Distribution rules, state handling and failure checks determine its behaviour.
- FirewallA firewall controls network traffic according to rules. An allowed connection replaces neither secure software nor permission checks within the application.
- Web Application FirewallA WAF checks web requests against rules. It can filter unwanted traffic, but needs suitable settings and does not replace fixing errors in code.
- Return-PathReturn-Path records the SMTP reverse path in a header. It explains the technical route for error reports, not a person’s identity.
- Envelope-FromEnvelope-From identifies the SMTP sender for transport and error feedback. It must be distinguished from the visible sender address.
- DMARC aggregate reportA DMARC aggregate report summarises a reporting mail system’s domain checks over a period. It helps examine sending sources and misconfigurations.
Articles on this topic
Cloud & Operations with ASES
Hosting, deployment, maintenance and support